Security Compliance Policy Associate

About this role

Details

A Civil Service Pension with an employer contribution of 28.97%

GBP

Job grade

Higher Executive Officer

Business area

Security and Information Management

Type of role

Digital

Information Technology

Security

Working pattern

Flexible working, Full-time, Job share, Part-time, Compressed hours

Number of jobs available

1

Contents

• Location
• About the job
• Benefits
• Things you need to know
• Apply and further information

This role is aligned to ONS hybrid working principles, which are based on attending the office with purpose. The postholder will be expected to contribute to the organisation’s overall 40% office attendance, in line with business and role requirements.

The induction process for the role will be conducted in person.

About the job

Job summary

The Office for National Statistics (ONS) is the UK’s largest producer of official statistics, covering a range of key economic, social and demographic topics. These include measuring changes in the value of the UK economy, estimating the size, geographic distribution and characteristics of the population, and providing indicators of price inflation, employment, earnings, crime and migration.

Security and Information Management (SaIM) directorate operates five key services across ONS: Security Risk Advice and Management; Knowledge and Information Management (KIM); Physical Security and Business Continuity; Security Development, Compliance and Audit; and Cyber Security, including our Partnering Services.

This Security Compliance Policy Associate role sits within the Security Development, Compliance and Audit (SDCA) team which forms part of the Security and Information Management (SaIM) directorate. The SDCA team provides an advice service to stakeholders for the complete lifecycle, security and governance of sensitive information stored within data access environments. The SDCA team also acts as an interface between stakeholders to deliver data protection assurance, monitor compliance with security policies and principles as well as provide evidence to stakeholders in support of these functions.

Job description

The primary focus of this role is the implementation of data protection assurance and audit capabilities within the Security Compliance team, in line with clearly defined security strategy and data protection standards. This also includes advising internal users, stakeholders and Information Asset Owners on compliance and risk associated with use of data.

You may be expected to identify and assess the risk(s) associated with the event / incident, raise awareness, and ensure appropriate steps are taken to record and manage any associated risks. Or you may assist planning and conducting audit. You will escalate any concerns/risks to the senior managment.

Responsibilities

• Support Compliance Policy Lead in developing and implementing effective data protection assurance processes and compliance documentation (e.g. DPIAs, SyOPs, etc.) to meet regulatory and legal requirements.
• Support in developing and implementing effective auditing and monitoring capability for data systems and data use which incorporates advice from Security and industry best practice.
• Establishing understanding of the nature, scope, context, purposes, and risk of data processing by different business areas to provide comprehensive guidance and effective oversight of compliance.
• Support in developing and promoting effective training, engagement, and awareness-raising activities to promote data protection and compliance best practice.
• Assisting with the investigation of non-compliance incidents and breaches and taking actions as directed.
• Supports Asset, Security, Information Management and Account responsibilities for the use of all ROSA assets in ONS possession.

Person specification

Essential Criteria

• Ability to extract, analyse and visualise information to produce metrics, identify trends and make predictions that inform assessments of risk associated with the use of Government data.
• Awareness of UK Government Security Policy Framework and relevant Information Assurance Standards, e.g. ISO 27001, Data Protection Act.
• Working knowledge of data protection legislation and regulations, including understanding of their implementation in different contexts across Government.
• Working knowledge of risks associated with the use of Government data for statistical production, with ability to provide advice on appropriate data use, risk mitigation and disclosure control.
• Excellent written and verbal communication skills at different levels; ability to effectively communicate complex topics to non-specialist audiences.

Desirable

• Holding or willing to work towards professional development qualifications within specialist Security discipline e.g. ISO 27001 Security Auditor etc.

Behaviours

We'll assess you against these behaviours during the selection process:

• Delivering at Pace
• Managing a Quality Service
• Changing and Improving
• Working Together

Benefits

Alongside your salary of £34,587, Office for National Statistics contributes £10,019 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides .

The Office for National Statistics is part of the Civil Service, and as such we share a number of key benefits with other departments, whilst also having our own unique offerings to support our valued colleagues across the organisation.

Whether you are hearing about us for the first time or already know a bit about our organisation, we hope that our careers site will give you a great insight into the benefits and facilities available to our colleagues, and our fantastic working culture.

Inclusion & Accessibility

At ONS we are always looking to attract the very best people from the widest possible talent pool, and we are proud to be an inclusive, equal opportunities employer. As a Disability Confident Leader we’re committed to ensuring that all candidates are treated fairly throughout the recruitment process.

As part of our application process, you will be prompted to provide details of any reasonable adjustments to our recruitment process that you need. If you would like to discuss any reasonable adjustments before applying, please contact the recruitment team in the first instance.

If you would like an accessible version of any of the attachments or recruitment documents below or linked to in this advert, please contact the recruitment team who will be happy to assist.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles , and will assess your Behaviours and Experience.

Security Clearance

For ONS the requirement for SC clearance is to have been present in the UK for 3 consecutive years immediately prior to applying and the department will consider eligibility by exception on a case-by-case basis. You will be asked to provide information regarding your UK residency during your application, and failure to provide this will result in your application being rejected.